Other privacy protections include a ban on processing information that reveals a person's trade union membership; health; sexual life or sexual orientation; race or ethnic origin; political opinions, religion or philosophical beliefs -- so vegans can at least rest assured that their choice of in-flight meal will remain private.
Law enforcers will have to keep an audit trail of how the passenger data is processed, and this will be used in a review of the law's effectiveness two years after it enters force.
Many Members of the European Parliament resisted the PNR directive, with tactics including delaying the final vote. The issue was controversial because parliamentarians had long opposed an agreement obliging airlines to provide U.S. authorities with PNR information for transatlantic flights.
European Parliament President Martin Schulz hailed the new deal as an important tool in the fight against terrorism and called on national governments to begin systematically sharing passenger data.
But EDRi's McNamee called the new legislation a disgrace. "It is shocking that, less than two years after the European Court overturned a Directive on needless storage of data of innocent citizens, the European Union seems hell bent on adopting another Directive which does almost exactly the same thing."
Sign up for CIO Asia eNewsletters.